@eaera-com/cms-sdk 0.1.76 → 0.1.78

package/dist/stores/authz.d.ts

@@ -1,8 +1,8 @@
 import { ICmsSDK } from '../core/sdk.type';
 import { IPortalAccess } from '../services/authz';
 /**
- * Authz store — portal-access domain state (permissions, roles, deny
- * status) with the canonical fetch-once cache.
+ * Authz store — authorization domain state (permissions, roles) with the
+ * canonical fetch-once cache.
  *
  * The call contract for every portal:
  *   - fetch on login success,
@@ -15,102 +15,88 @@ import { IPortalAccess } from '../services/authz';
  * the auth store — silent sliding token rotation does NOT invalidate) and
  * reset on logout, so a fresh login always re-resolves access.
  *
- * Consumers branch on `errorCode` for the documented failures:
- * `UNAUTHENTICATED`, `INVALID_TOKEN_AUDIENCE` (session unusable for this
- * portal) and `PORTAL_ACCESS_DENIED` (authenticated, no grant).
+ * The endpoint (`GET /api/v1/authz/me/portals`) returns the caller's
+ * effective grants only — there is no access flag on the wire. Consumers
+ * gate their portal's access key themselves (e.g. `can('people:portal:access')`
+ * in the route middleware). Consumers branch on `errorCode` for the
+ * documented failures: `UNAUTHENTICATED` / `INVALID_TOKEN_AUDIENCE`
+ * (session unusable for this portal) and a legacy 403
+ * `PORTAL_ACCESS_DENIED` (still honoured for older backends).
  */
 export declare const useAuthzStore: import('pinia').StoreDefinition<"cms-authz", Pick<{
-    portal: import('vue').Ref<string, string>;
     portalAccess: import('vue').Ref<{
-        portal: string;
-        hasAccess: boolean;
+        userId: number | null;
         permissions: string[];
         roles: string[];
     } | null, IPortalAccess | {
-        portal: string;
-        hasAccess: boolean;
+        userId: number | null;
         permissions: string[];
         roles: string[];
     } | null>;
     loaded: import('vue').Ref<boolean, boolean>;
     isLoading: import('vue').Ref<boolean, boolean>;
     errorCode: import('vue').Ref<string, string>;
-    hasAccess: import('vue').ComputedRef<boolean>;
     permissions: import('vue').ComputedRef<string[]>;
     roles: import('vue').ComputedRef<string[]>;
     isSessionInvalid: import('vue').ComputedRef<boolean>;
     isAccessDenied: import('vue').ComputedRef<boolean>;
     setSdk: (instance: ICmsSDK) => void;
-    setPortal: (id: string) => void;
     loadPortalAccess: (opts?: {
         force?: boolean;
-        portal?: string;
     }) => Promise<void>;
     can: (permission: string) => boolean;
     hasRole: (role: string) => boolean;
     hasAnyPermission: (list: string[]) => boolean;
     hasAllPermissions: (list: string[]) => boolean;
-}, "portal" | "portalAccess" | "loaded" | "errorCode" | "isLoading">, Pick<{
-    portal: import('vue').Ref<string, string>;
+}, "portalAccess" | "loaded" | "errorCode" | "isLoading">, Pick<{
     portalAccess: import('vue').Ref<{
-        portal: string;
-        hasAccess: boolean;
+        userId: number | null;
         permissions: string[];
         roles: string[];
     } | null, IPortalAccess | {
-        portal: string;
-        hasAccess: boolean;
+        userId: number | null;
         permissions: string[];
         roles: string[];
     } | null>;
     loaded: import('vue').Ref<boolean, boolean>;
     isLoading: import('vue').Ref<boolean, boolean>;
     errorCode: import('vue').Ref<string, string>;
-    hasAccess: import('vue').ComputedRef<boolean>;
     permissions: import('vue').ComputedRef<string[]>;
     roles: import('vue').ComputedRef<string[]>;
     isSessionInvalid: import('vue').ComputedRef<boolean>;
     isAccessDenied: import('vue').ComputedRef<boolean>;
     setSdk: (instance: ICmsSDK) => void;
-    setPortal: (id: string) => void;
     loadPortalAccess: (opts?: {
         force?: boolean;
-        portal?: string;
     }) => Promise<void>;
     can: (permission: string) => boolean;
     hasRole: (role: string) => boolean;
     hasAnyPermission: (list: string[]) => boolean;
     hasAllPermissions: (list: string[]) => boolean;
-}, "hasAccess" | "permissions" | "roles" | "isSessionInvalid" | "isAccessDenied">, Pick<{
-    portal: import('vue').Ref<string, string>;
+}, "permissions" | "roles" | "isSessionInvalid" | "isAccessDenied">, Pick<{
     portalAccess: import('vue').Ref<{
-        portal: string;
-        hasAccess: boolean;
+        userId: number | null;
         permissions: string[];
         roles: string[];
     } | null, IPortalAccess | {
-        portal: string;
-        hasAccess: boolean;
+        userId: number | null;
         permissions: string[];
         roles: string[];
     } | null>;
     loaded: import('vue').Ref<boolean, boolean>;
     isLoading: import('vue').Ref<boolean, boolean>;
     errorCode: import('vue').Ref<string, string>;
-    hasAccess: import('vue').ComputedRef<boolean>;
     permissions: import('vue').ComputedRef<string[]>;
     roles: import('vue').ComputedRef<string[]>;
     isSessionInvalid: import('vue').ComputedRef<boolean>;
     isAccessDenied: import('vue').ComputedRef<boolean>;
     setSdk: (instance: ICmsSDK) => void;
-    setPortal: (id: string) => void;
     loadPortalAccess: (opts?: {
         force?: boolean;
-        portal?: string;
     }) => Promise<void>;
     can: (permission: string) => boolean;
     hasRole: (role: string) => boolean;
     hasAnyPermission: (list: string[]) => boolean;
     hasAllPermissions: (list: string[]) => boolean;
-}, "setSdk" | "setPortal" | "loadPortalAccess" | "can" | "hasRole" | "hasAnyPermission" | "hasAllPermissions">>;
+}, "setSdk" | "loadPortalAccess" | "can" | "hasRole" | "hasAnyPermission" | "hasAllPermissions">>;
 //# sourceMappingURL=authz.d.ts.map

package/dist/stores/authz.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authz.d.ts","sourceRoot":"","sources":["../../src/stores/authz.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAGhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;uBA6DI,OAAO,KAAG,IAAI;oBAIjB,MAAM,KAAG,IAAI;8BAiBG;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAxClE,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAMjB,MAAM,EAAE,KAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;uBAMzB,OAAO,KAAG,IAAI;oBAIjB,MAAM,KAAG,IAAI;8BAiBG;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAxClE,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAMjB,MAAM,EAAE,KAAG,OAAO;;;;;;;;;;;;;;;;;;;;;;uBAMzB,OAAO,KAAG,IAAI;oBAIjB,MAAM,KAAG,IAAI;8BAiBG;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAxClE,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAMjB,MAAM,EAAE,KAAG,OAAO;+GAgHtD,CAAC"}
+{"version":3,"file":"authz.d.ts","sourceRoot":"","sources":["../../src/stores/authz.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAIhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEvD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;uBAwDI,OAAO,KAAG,IAAI;8BAiBD;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAlCjD,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAKjB,MAAM,EAAE,KAAG,OAAO;;;;;;;;;;;;;;;;;;uBAKzB,OAAO,KAAG,IAAI;8BAiBD;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAlCjD,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAKjB,MAAM,EAAE,KAAG,OAAO;;;;;;;;;;;;;;;;;;uBAKzB,OAAO,KAAG,IAAI;8BAiBD;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAG,OAAO,CAAC,IAAI,CAAC;sBAlCjD,MAAM,KAAG,OAAO;oBAKlB,MAAM,KAAG,OAAO;6BAEP,MAAM,EAAE,KAAG,OAAO;8BAKjB,MAAM,EAAE,KAAG,OAAO;iGAuGtD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eaera-com/cms-sdk",
-  "version": "0.1.76",
+  "version": "0.1.78",
   "description": "EAERA CMS SDK — data access layer for Nuxt 3 apps (ofetch + Pinia + typed services)",
   "type": "module",
   "main": "./dist/index.js",